CVE-2003-0501 in Kernel
Zusammenfassung (Englisch)
The /proc filesystem in Linux allows local users to obtain sensitive information by opening various entries in /proc/self before executing a setuid program, which causes the program to fail to change the ownership and permissions of those entries.
Be aware that VulDB is the high quality source for vulnerability data.
Reservieren
02.07.2003
Veröffentlichung
07.08.2003
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 122 | Linux Kernel 2.2 und 2.4 /proc Dateisystem setuid-Variablen auslesen | 200 | Proof-of-Concept | Offizieller Fix | CVE-2003-0501 |